$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft File: FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft (raw, json) Hash identifier: HzOwyjeVyPu4aOjn88A3LG1x4Z18HACxIDXm9qtHfaw= Subject key identifier: 74:6A:29:5E:95:9E:2B:96:CE:5A:09:66:04:2B:F6:81:0D:A8:B6:B6 Authority key identifier: FD:61:E7:6E:14:05:9B:62:14:C0:D1:7E:9C:49:BE:A7:E1:AE:3A:15 Certificate issuer: /CN=FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15 Certificate serial: 14BB91D2B995C8DDF404C1C4FF36D195B4CCCF99 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 16:05:59 +0000 Manifest this update: Wed 23 Sep 2026 16:00:59 +0000 Manifest next update: Thu 24 Sep 2026 19:03:59 +0000 Files and hashes: 1: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: vIUoSFhkJP5hkDIwcTRzx7ooCpVifIbFa0ihUfETBXw=) 2: FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.crl (hash: f11jzy9ccA2X6aIT8sAFIsPSOhy9WzFYmi4JbAuj1e8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.crl rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:bb:91:d2:b9:95:c8:dd:f4:04:c1:c4:ff:36:d1:95:b4:cc:cf:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15 Validity Not Before: Sep 23 16:00:59 2026 GMT Not After : Sep 24 19:03:59 2026 GMT Subject: CN=746A295E959E2B96CE5A0966042BF6810DA8B6B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:64:59:34:28:b0:04:8a:0d:7f:19:3c:0b: 47:19:45:ad:e2:45:dc:e1:f6:6a:1f:a8:9d:fe:fd: 99:ba:fc:d8:a6:4c:ad:4e:13:5f:49:d6:80:91:d0: ab:01:16:2f:88:09:10:59:51:96:68:cb:ee:20:e6: ca:92:d1:9a:15:4b:d1:ae:da:98:b4:eb:03:1c:04: a4:8f:80:a6:ae:8b:b7:c7:4b:2e:6c:11:26:9e:fa: cf:f4:0a:52:da:e2:72:71:65:c2:2d:03:f8:7f:99: 50:c4:06:77:2e:1c:55:b5:94:e8:e4:25:75:23:d0: aa:61:2a:b6:86:e8:9c:35:6b:45:20:94:cc:be:6c: 56:f5:c0:5f:23:cc:35:bd:ba:12:bd:6a:fd:f6:c7: ce:7a:e8:88:30:3f:9d:b3:4c:9d:e1:ca:f0:a0:fa: 12:ef:8c:b1:62:70:0a:15:86:a4:00:75:ae:a6:c6: 94:06:83:5a:db:ee:f2:91:69:88:80:7e:1b:51:78: 33:de:84:f4:9b:1b:d5:66:39:f2:30:cd:07:d7:c4: df:c1:87:39:38:1f:7e:b4:d0:08:f2:32:d2:1a:cd: 11:e8:1c:9f:85:cc:68:eb:f1:53:ce:56:99:ab:2c: 4f:e4:c0:61:3a:3a:14:89:19:a7:6c:f6:15:0b:35: e0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6A:29:5E:95:9E:2B:96:CE:5A:09:66:04:2B:F6:81:0D:A8:B6:B6 X509v3 Authority Key Identifier: keyid:FD:61:E7:6E:14:05:9B:62:14:C0:D1:7E:9C:49:BE:A7:E1:AE:3A:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ef:6a:dd:a7:10:90:43:69:a2:33:ac:9c:08:6d:5e:9c:a7: 17:55:d6:0f:92:c9:ed:cd:ec:12:fb:73:69:87:42:32:a4:0e: 2c:7e:75:bc:91:9b:04:ac:23:7d:89:a7:ba:77:9d:aa:1c:8e: b5:13:df:97:39:30:4a:39:70:d0:60:2a:fe:e4:56:63:09:f8: 4f:ab:95:8f:f4:d9:df:bf:00:6f:12:51:7f:10:38:0d:44:3f: ef:26:16:c2:ea:d1:82:70:70:5a:ff:36:60:13:ce:03:8b:eb: 7f:43:31:cf:a3:f1:07:4e:04:9e:c3:29:8d:9f:5f:bc:c4:55: c5:ff:eb:f6:fc:91:4f:bf:58:2c:6f:ff:34:d3:22:5a:ff:25: 4c:69:90:05:94:b9:09:74:07:12:e6:a1:c1:5b:eb:63:e7:7f: 73:fc:aa:67:ae:53:d1:97:a9:d8:75:cf:32:5a:32:e1:b9:0a: 5c:a0:f5:dc:2e:02:e8:5e:b0:2c:20:cb:75:01:44:aa:96:03: 82:7a:78:17:46:95:08:c4:3e:e3:fc:84:4d:e5:c9:ff:e2:06: c2:f3:48:13:8a:98:a4:c1:a1:9e:87:46:ff:54:1f:9f:41:50: e3:6b:d0:79:93:ce:76:29:38:7e:a8:a7:c7:aa:54:9e:c1:ac: d9:8d:ed:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFLuR0rmVyN30BMHE/zbRlbTMz5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ2MUU3NkUxNDA1OUI2MjE0QzBEMTdFOUM0OUJFQTdF MUFFM0ExNTAeFw0yNjA5MjMxNjAwNTlaFw0yNjA5MjQxOTAzNTlaMDMxMTAvBgNV BAMTKDc0NkEyOTVFOTU5RTJCOTZDRTVBMDk2NjA0MkJGNjgxMERBOEI2QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7q2RZNCiwBIoNfxk8C0cZRa3i Rdzh9mofqJ3+/Zm6/NimTK1OE19J1oCR0KsBFi+ICRBZUZZoy+4g5sqS0ZoVS9Gu 2pi06wMcBKSPgKaui7fHSy5sESae+s/0ClLa4nJxZcItA/h/mVDEBncuHFW1lOjk JXUj0KphKraG6Jw1a0UglMy+bFb1wF8jzDW9uhK9av32x8566IgwP52zTJ3hyvCg +hLvjLFicAoVhqQAda6mxpQGg1rb7vKRaYiAfhtReDPehPSbG9VmOfIwzQfXxN/B hzk4H3600AjyMtIazRHoHJ+FzGjr8VPOVpmrLE/kwGE6OhSJGads9hULNeArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdGopXpWeK5bOWglmBCv2gQ2otrYwHwYDVR0j BBgwFoAU/WHnbhQFm2IUwNF+nEm+p+GuOhUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EwMjEwYjMtY2NhMi00M2M1LTg5ZjktNWE5MDg2YTYwNzAzLzEvRkQ2MUU3NkUx NDA1OUI2MjE0QzBEMTdFOUM0OUJFQTdFMUFFM0ExNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDYxRTc2RTE0MDU5QjYyMTRDMEQxN0U5QzQ5QkVBN0UxQUUz QTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvRkQ2MUU3NkUxNDA1OUI2MjE0QzBEMTdFOUM0OUJF QTdFMUFFM0ExNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrvat2nEJBDaaIzrJwIbV6cpxdV1g+Sye3N 7BL7c2mHQjKkDix+dbyRmwSsI32Jp7p3naocjrUT35c5MEo5cNBgKv7kVmMJ+E+r lY/02d+/AG8SUX8QOA1EP+8mFsLq0YJwcFr/NmATzgOL639DMc+j8QdOBJ7DKY2f X7zEVcX/6/b8kU+/WCxv/zTTIlr/JUxpkAWUuQl0BxLmocFb62Pnf3P8qmeuU9GX qdh1zzJaMuG5Clyg9dwuAuhesCwgy3UBRKqWA4J6eBdGlQjEPuP8hE3lyf/iBsLz SBOKmKTBoZ6HRv9UH59BUONr0HmTznYpOH6op8eqVJ7BrNmN7Y4= -----END CERTIFICATE-----Generated at Thu Sep 24 04:55:21 2026 by rpki-client